1683 matches found
CVE-2021-27604
CVE-2021-27604 affects SAP NetWeaver ABAP Server and ABAP Platform (Process Integration – Enterprise Service Repository JAVA Mappings) across versions 7.10, 7.20, 7.30, 7.31, 7.40, 7.50. Root cause indicated as XML External Entity (XXE) vulnerability. Impact details in sources show partial confid...
CVE-2021-27604
In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform Process Integration - Enterprise Service Repository JAVA Mappings, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, SAP recommends to refer this note...
PT-2021-17535
Name of the Vulnerable Software and Affected Versions SAP NetWeaver ABAP Server and ABAP Platform Process Integration - Integration Builder Framework versions 7.10, 7.30, 7.31, 7.40, 7.50 Description The issue allows an attacker to access information under certain conditions, which would otherwis...
CVE-2021-27604: Improper Restriction of XML External Entity Reference
In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform Process Integration - Enterprise Service Repository JAVA Mappings, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, SAP recommends to refer this note...
PT-2021-17540
Name of the Vulnerable Software and Affected Versions SAP NetWeaver ABAP Server and ABAP Platform versions 7.10 through 7.50 Description The issue concerns an XML External Entity vulnerability in the Process Integration - Enterprise Service Repository JAVA Mappings component. To address this, SAP...
CVE-2021-27599: Undefined Security Weakness
SAP NetWeaver ABAP Server and ABAP Platform Process Integration - Integration Builder Framework, versions - 7.10, 7.30, 7.31, 7.40, 7.50, allows an attacker to access information under certain conditions, which would otherwise be restricted...
CVE-2021-27603
An RFC enabled function module SPIWAITMILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the...
CVE-2021-27603
An RFC enabled function module SPIWAITMILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the...
CVE-2021-27603
An RFC enabled function module SPIWAITMILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the...
Design/Logic Flaw
An RFC enabled function module SPIWAITMILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the...
CVE-2021-27603
The CVE-2021-27603 entry concerns SAP NetWeaver AS ABAP. It affects SAP NetWeaver AS ABAP versions 731, 740, and 750, where the RFC function module SPI_WAIT_MILLIS can be invoked to keep a work process busy, enabling an attacker to repeatedly call it and block all work processes, causing a Denial...
SAP NetWeaver AS ABAP Business Server 安全漏洞
SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A denial of service vulnerability exists in SAP NetWeaver AS ABAP versions 731, 740, and 750. The vulnerability...
CVE-2021-27603: Undefined Security Weakness
An RFC enabled function module SPIWAITMILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the...
CVE-2021-21478
SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities...
Design/Logic Flaw
SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities...
CVE-2021-21478
SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities...
CVE-2021-21478
SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities...
CVE-2021-21478
CVE-2021-21478 affects SAP Web Dynpro ABAP and enables an open redirect via reverse tabnabbing, allowing an attacker to redirect users to a malicious site. Concrete details across sources corroborate the impact as an open redirect and link to SAP notes (e.g., SAP Note 2974582) for remediation. Th...
PT-2021-14545
Name of the Vulnerable Software and Affected Versions SAP Web Dynpro ABAP affected versions not specified Description The issue allows an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities. This can potentially affect a large number of devices worldwide,...